I think a friend's Twitter account has been compromised. She has sent me a direct message with a link which is an obvious phishing attempt to get my password.

I didn't fall for it, and I sent a message back to my friend that her account may have been compromised. Even if the message didn't actually come from her and was spoofed in some other way, I still want to report it to Twitter so that they can detect other messages using the same link.

The Twitter Help Center isn't particularly helpful in this regard. How can I report this to them? Can one even forward a Twitter DM?